Explore the authentication options available to developers on the illuminis platform, including SSO, OAuth, social login,and multi-factor authentication.
The illuminis Developer Platform provides a comprehensive authentication service that developers can integrate into their applications with minimal configuration. Instead of building custom authentication systems from scratch, developers use the illuminis Auth SDK to add secure user login, registration,and session management. This built-in auth service supports multiple authentication methods to accommodate different application types and user preferences.
The most common authentication method, email and password login, is fully managed by the platform. This includes secure password hashing using bcrypt, password strength enforcement, email verification flows, password reset with secure token-based links,and brute force protection with automatic account lockout after repeated failed attempts. Developers integrate this method with a single SDK call that renders a customizable login form or connects to a headless API for fully custom UIs.
The platform supports social login integration with major identity providers, allowing users to sign in with existing accounts:
Social login providers are enabled through the Developer Console with a toggle interface. No OAuth client registration is required because the platform manages provider credentials centrally.
For applications targeting enterprise customers, the platform supports SSO integration through industry-standard protocols:
The platform provides built-in MFA support that developers can enable for their applications. Supported MFA methods include time-based one-time passwords via authenticator apps such as Google Authenticator, Authy,and 1Password, SMS-based verification codes,and email-based verification codes. MFA can be configured as optional for users, mandatory for all users, or required only for specific roles such as administrators.
For applications that expose APIs to other developers or automated systems, the platform supports API key generation and management. API keys can be scoped to specific permissions, rate-limited,and rotated without downtime. This is particularly useful for B2B applications and developer tools built on the illuminis platform.
The authentication service handles session management automatically, including JWT token generation, refresh token rotation, session expiration policies,and cross-device session management. Developers can configure session lifetimes, concurrent session limits,and token refresh behavior through the Developer Console. All tokens are signed and validated by the platform, eliminating common token-handling vulnerabilities.